Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
10 views

Documentation on Application Firewall [closed]

macos is shipped with the "traditional" firewall DISABLED and has "Application Firewall"^1(not a good reference). My understanding is the application firewall, just like Windows ...
David Timber's user avatar
0 votes
0 answers
18 views

Question about changing macOS Firewall option

I have installed Apache Web Server into one of my Mac. And then, I've been publishing this WebServer to inter-net. I'm also using OS built-in Firewall, and allow httpd to external connection. I ...
xanadu6291's user avatar
2 votes
2 answers
59 views

Disable Firewall Notifications

I am developing some software as part of a research project, and am running into an annoying issue with the Mac firewall. Our system architecture involves running multiple concurrent processes which ...
baum's user avatar
  • 191
1 vote
0 answers
52 views

MacOS Firewall blocks webserver and logging wont work

Currently I wrote a small game webapp. The server is running on my MacBook Air M1 Sonoma 14.3 and listening on 0.0.0.0:8080. I want to connect to it within my local network from my iPhone. This works ...
yannick818's user avatar
0 votes
0 answers
24 views

Using SOCKS and system Firewall blocks IMAP/SMTP

When I use the internal service of my university, I need to be inside the university network. So I have been using the SOCKS proxy and an SSH login server of my university for many years when I am out ...
Akira Okumura's user avatar
1 vote
0 answers
40 views

How do I reliably expose MacPorts dovecot to the LAN?

I am currently making an attempt to run various ports on macOS Sonoma (mail server stuff, like postfix, dovecot, installed by MacPorts) and I am running into a problem. From inside the machine itself, ...
gctwnl's user avatar
  • 694
0 votes
0 answers
41 views

How can I change destination domain in macOS Sonoma?

for example, whenever an console command like git clone https://github.com/... or wget https://github.com/... which makes a remote call to github.com, change the actual call to an other domain like ...
chrisyue's user avatar
  • 101
2 votes
0 answers
46 views

Allow Steam game to accept incoming connections Mac

So I am not really familiar with Mac, as I usually use Windows. I want to connect two instances of Stardew Valley (installed over Steam) using the LAN option. host computer uses macOS 13.6.3 joining ...
ShadowCrafter_01's user avatar
1 vote
0 answers
203 views

macOS 14.1.2 firewall blocking Colima from running

I have macOS 14.1.2 with the Firewall turned on, but not set to block all Firewall is enabled. (State = 1) Block all DISABLED! Automatically allow signed built-in software ENABLED Automatically allow ...
NHunter's user avatar
  • 11
0 votes
0 answers
121 views

MacOS Ventura: How to permanently disable pftctl

I'm on MacOS Ventura on M1 Apple Silicon. Something keeps re-enabling pfctl that blocks my internet access roughly every 10 minutes. I'm no expert in macos or pfctl but after a bit of googling, I ...
CybaTronX's user avatar
0 votes
0 answers
147 views

Mac firewall blocking incoming connections to app even though it's allowed

I have 2 executables, a server and client. The server just listens on port 44888 for UDP packets and displays them. The client sends UDP packets to an address and port. I determined that the Mac ...
Grant Upson's user avatar
0 votes
0 answers
66 views

Unablet to mount OpenBSD NFS share from MacOS unless I disable firewall

I have an OpenBSD server with NFS shares that I can use without any problem from a Linux client. On MacOS, I had to specify the following options -o nolocks,resvport,vers=3 to get the mount command to ...
dwrz's user avatar
  • 101
0 votes
0 answers
51 views

Using little snitch on Cricut design space

I'm trying to stop Cricut Design Space constantly updating, it should run without internet access but recently there's been some changes and now it wants to connect all the time. I Just installed ...
A.Art's user avatar
  • 1
1 vote
1 answer
174 views

.io .xyz and other less popular TLDs cannot be resolved

I bought a new MacBook Pro 2021 M1, and I can't access URLs ending with .io, .xyz, and other less popular TLDs. The issue does not come from the browser. I tried many browsers and the terminal ...
BonisTech's user avatar
0 votes
0 answers
81 views

UDP problems with virtual machine

I'm using an M1 Mac and I'm trying to run a Windows .exe file called 'simhub'. It uses UDP to allow telemetry between racing games (PS5) and a Windows computer. I don't have a Windows computer, so I'...
Cian Gopal's user avatar
0 votes
0 answers
237 views

NAT rule redirection with Pfctl over VPN

I'm trying to configure a NAT redirection with Pfctl on my macOS (Ventura 13.2). I want to achieve a redirection for a specific IP and port to another IP (which is reachable through VPN) and the same ...
Siraxis's user avatar
0 votes
0 answers
65 views

How to use `pfctl` to define a kill switch?

I use WireGuard, specifically wg-quick, to tunnel both my IPv4 and IPv6 traffic through a VPN server. However, I have noticed that my tunnel often leaks IPv6 traffic to my ISP after waking up from ...
Matt's user avatar
  • 171
1 vote
1 answer
424 views

"Ask for incoming connections" box will not stop appearing for an unknown application

I am getting frustrated with my computer. I have a Macbook Pro 2021, M1 chip running Ventura 13.3.1. A dialog box keeps popping up, almost immediately disappearing, and then coming back, and quickly ...
hotdog101's user avatar
3 votes
1 answer
1k views

After denying an app network permissions, how do I explicitly allow an application to listen on a network port?

I just reinstalled my Macbook (Ventura) and started my privoxy server for the first time. A box popped up asking me if I wanted to allow this application to listen on a network port, or something to ...
Hubro's user avatar
  • 250
2 votes
0 answers
79 views

macOS Big Sur blocking gui internet access if certain connections to apple are denied, ping working

I have the following problem: I use Little Snitch to block just about any connection to apple (please no advice on how important it is to allow updates etc, I know what I'm doing and why ;) ). This ...
co-der-in's user avatar
1 vote
1 answer
613 views

iptables like forwarding of packets with pfctl on mac os

I would like to build a bridge between two interfaces with pf, like with iptables: sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --...
ptiza_v_nebe's user avatar
1 vote
1 answer
309 views

Cannot deactivate Firewall Stealth Mode

Probably after last macOS upgrade I cannot deactivate Stealth Mode in Firewall options. Even if I deactivate it, after system restart it is active. Is there any possibility to disable stealth mode ...
Łukasz Rzeszotarski's user avatar
0 votes
1 answer
139 views

Can I use pf to route incoming incoming traffic on a specific port differently?

I have a mac that's connected to a VPN, where the VPN's gateway is the system's default gateway for all outgoing traffic. This means that I cannot connect to any services running on my mac from some ...
Bri Bri's user avatar
  • 2,446
0 votes
0 answers
152 views

Opening TCP port 443 to specific domains?

I am trying to work remotely with a healthcare professional through Doxy.me, a URL that that they prefer for client calls (e.g., rather than Zoom, etc.). When I attempt to meet with them, everything ...
BobsMyUncle's user avatar
0 votes
1 answer
182 views

Internet connection is disabled after updating the pf.conf file

I am trying to redirect traffic on all ports to my local server by editing the pf.conf file on MacBook. pf.conf file content: # # Default PF configuration file. # # This file contains the main ruleset,...
1n4ho12's user avatar
0 votes
1 answer
154 views

Java application connection to the internet blocked when using a different WiFi

I am using dBeaver to connect to some databases that are at AWS. From home this works fine, but when I connect to my mobile hotspot these databases time out when connecting. First I assumed that these ...
Martijn Burger's user avatar
2 votes
0 answers
617 views

Firewall keeps setting an incoming connection to allow for com.google.Chrome.helper despite being set to block

A few months ago, I made this post, asking why the allow or deny dialogue was appearing every time chrome was opened. Everyone stated that this only happens every time an app is opened if it's self ...
GaussStrife's user avatar
-1 votes
1 answer
628 views

Why is PF not working on M1?

I don't understand why PF does not work on M1. This problem is only on M1. I tried turning firewall on/off. PF successfully enabled without my code /etc/pf.conf scrub-anchor "com.apple/*" ...
yepev97979's user avatar
0 votes
0 answers
173 views

macOS Monterey firewall off but cannot access port

I have a PostgreSQL database which is being deployed using docker, basically I'm exposing the port 5432 on my local machine, my firewall is turned off and I'm trying to log into the database from a ...
moth's user avatar
  • 101
-2 votes
1 answer
753 views

Certain programs on Lulu app (Objective see) are not filtered

I am finding that certain apps (on Monterey) are not being filtered. These are native apple apps. Even if I disable network access, on reboot, it resets. When I deny access, it adds another deny rule. ...
CarriMegrabyan's user avatar
0 votes
1 answer
294 views

has apple removed pflog from packetfilter?

FreeBSD includes pflog as a way to analyze pf logs. I dont see a /var/log/pflog. Has MacOS removed the pflog and /var/log/pflog? Is it possible to enable this?
CarriMegrabyan's user avatar
1 vote
1 answer
516 views

How can I allow ONLY iMessage (and not web browsing) through a firewall?

I've looked up what TCP ports iMessage uses to communicate with and Apple says: 80 (TCP) 443 (TCP) 5223 (TCP) In my particular use-case, web browsing (80, 443) is not allowed. But we would like to ...
user227963's user avatar
0 votes
0 answers
102 views

Firewall bug; socket programming

I am seeking a work-around for a bug in MacOS 12.4. I write C++ programs that create TCP/IP listening sockets. When I launch one of them, I see an error dialog containing language Do you want the ...
Arnstein's user avatar
1 vote
0 answers
33 views

What ports and protocols does the Apple "Protect Mail Activity" indirect asset loading feature require?

What are the ports used by the indirect asset loading feature of the Apple Mail app?
gen's user avatar
  • 241
1 vote
0 answers
42 views

Incoming Network Connection alert does not dismiss

I develop web applications and often get the Firewall alert on a new version of my code: This is OK (although I would prefer to just answer one and be done with it). The problem is that selecting ...
Paul Waldo's user avatar
2 votes
1 answer
928 views

Port forwarding

I would like to intercept the tcp traffic from a device on my network. I cannot change the destination but I set the router IP to the IP of my M1 Mac Mini. I used to do this with ipfw on a virtual ...
PatrickB's user avatar
0 votes
1 answer
271 views

I accidentally clicked deny on port open prompt

I'm developing an app that binds to a local address, on a random port when it runs. I used to get a prompt to allow connections but I accidentally pressed Enter key and I think I denied the terminal ...
Romeo Mihalcea's user avatar
6 votes
0 answers
2k views

Getting asked if I want to allow or deny incoming connections on the google chrome helper app every time I launch chrome

I have clicked deny everytime, and I have checked that the firewall rule states block. Yet it keeps appearing. I realize at this point that I am actually unsure what this dialog window is asking. ie ...
GaussStrife's user avatar
2 votes
1 answer
2k views

Apply outgoing firewall rules per app selectively (MacOS Big Sur)

Question: Which firewall can selectively apply multiple named domain resolving rules per app? E.g. like the One Periodic's Hands Off firewall Details: I'm looking for an app or combination of apps ...
questioner56's user avatar
1 vote
1 answer
2k views

pf.conf configuration?

I've been a Windows user for 35+ years and I'm new to Macintosh. I would like to configure PF firewall to block the ports below, incoming and outgoing on all interfaces. What commands do I need to use ...
macintoshnewuser's user avatar
0 votes
1 answer
2k views

How to open a port on MacOS Big Sur?

I am trying to open a specific port (8000) on my Mac (macOS 11.6) for local web development testing. Let’s say my computer’s NAT IP is 192.168.1.10. If I go to 192.168.1.10:8000, I get nothing. nmap ...
Jason's user avatar
  • 1,116
0 votes
1 answer
6k views

What are "netbiosd" and "rapportd"? Why are they asking for incoming network connections? [duplicate]

I was asked to allow/block netbiosd & rapportd, but I do not know what they are, so I block both of them. What are they, and blocking them is okay?
Demoxing's user avatar
  • 113
1 vote
0 answers
475 views

Remote sharing doesn't work even after allowing config in Firewall

I've allowed remote sharing in the Firewall And enabled remote sharing and remote login. I have Observe and Control enabled from the options dialog in Remote sharing. But remote sharing works only ...
Anadi Misra's user avatar
2 votes
1 answer
559 views

Can I compile and locally run SimpleFirewall example app without enrolling with apple developer program?

I was curious about writing my own simple application firewall. After going through several tutorials I've downloaded SimpleFirewall example app available at: https://developer.apple.com/documentation/...
IlliakaillI's user avatar
4 votes
2 answers
3k views

MacOS Firewall: Program grayed out, can't be added to Firewall Options

In MacOS Monterey (12.0.1), I am running Python 2.7 from an Anaconda virtual environment. Each time I run the Python script, I am asked if I want to accept incoming network connections: I have tried ...
P A N's user avatar
  • 9,844
1 vote
0 answers
153 views

Modifying tcp packets going out on a specific port

I am newbie with pf. I want to modify all outgoing TCP traffic having destination port 8001. For that, firstly, I wanted to use pf to redirect all the TCP traffic at en0 with destination port 8001 to ...
Arti Dua's user avatar
0 votes
2 answers
1k views

MacBook blocks all incoming connections, even when firewall is turned off

I moved to a new MacBook (High Sierra initially and BigSur now) and all incoming network connections are blocked on the new MacBook (restored from the backup couple of weeks ago). On an old one ...
FoxyBOA's user avatar
  • 133
2 votes
0 answers
225 views

Monitor VM network with Little Snitch

I've upgraded to Big Sur (yep, late to the party), VM Ware Fusion 12 and Little Snitch 5. I get that kernel extension are no longer valid and VM Ware now uses the Apple network API. Previously I could ...
sansSpoon's user avatar
  • 1,037
-1 votes
1 answer
298 views

Hybrid-Analysis.com indicates macOS built-in file is contacting a malicious website

I'm wondering if anyone knows why this /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc is connecting to adriver.ru ? This is according ...
I_Don't_Code's user avatar
1 vote
2 answers
756 views

How to dynamically add anchors on startup for apple pfctl without editing system pf.conf

There are a few answers on using pfctl on os x, but none really give a nice clean way to make an anchor and have it loaded on startup, or to allow programs to hook in and dynamically update / replace ...
nate's user avatar
  • 11

1
2 3 4 5
8